Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-aPUi_d5vCf8feIg2a9dFVsRnOM.roa
File:                     1-aPUi_d5vCf8feIg2a9dFVsRnOM.roa (raw, json)
Hash identifier:          PupEsIXHB6rGqEymngMsBPy2Wh8A195/YgvNAUoFwO4=
Subject key identifier:   F9:A3:D4:8B:F7:79:BC:27:FC:7D:E2:20:D9:AF:5D:15:5B:11:9C:E3
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       01942823A5499DEE7567E1F1AA123F53A3DE
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-aPUi_d5vCf8feIg2a9dFVsRnOM.roa
Signing time:             Thu 02 Jan 2025 17:50:12 +0000
ROA not before:           Thu 02 Jan 2025 17:50:12 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:23:a5:49:9d:ee:75:67:e1:f1:aa:12:3f:53:a3:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Jan  2 17:50:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f9a3d48bf779bc27fc7de220d9af5d155b119ce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:91:f3:8e:a8:d8:c3:db:ef:10:88:4f:ca:51:
                    38:96:2f:6b:b2:56:8c:d5:b5:a7:44:34:15:fa:9b:
                    27:02:1f:62:94:fa:32:05:3f:13:88:f7:bf:24:34:
                    f0:c1:17:be:5e:cd:62:4f:6a:c2:6a:18:65:82:07:
                    3a:8c:b5:5f:2a:82:2f:08:fc:ea:dc:e6:11:11:40:
                    b0:cb:c5:66:63:35:98:99:28:35:f4:6d:df:ad:8e:
                    4e:bf:61:48:c5:a9:8c:88:54:a3:de:0a:4a:c1:36:
                    22:75:e0:c3:5e:40:6c:ad:e5:b9:fd:87:c0:6a:ac:
                    25:b4:fb:93:56:44:e3:8e:d6:bf:ac:f8:58:c9:1e:
                    a1:1e:0f:23:d4:e7:52:36:a7:de:73:36:b8:97:26:
                    46:b0:d8:08:34:e0:31:30:b3:77:13:8f:7b:09:46:
                    5b:40:53:ca:26:2a:a1:b3:1d:0c:0b:36:5b:ad:fb:
                    20:28:d6:80:2a:7b:9b:1d:93:6c:f7:17:9a:48:2c:
                    0a:4f:e8:80:a6:53:7f:19:d5:bf:5a:5b:13:cc:4e:
                    37:d3:b2:86:c7:a2:3b:60:f6:b7:7c:10:99:2d:dd:
                    6b:0a:be:51:44:a0:2c:80:e1:5d:eb:a8:6f:8a:1c:
                    35:3e:a4:ad:63:6f:76:0a:7d:f8:c8:93:7e:4f:6d:
                    67:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A3:D4:8B:F7:79:BC:27:FC:7D:E2:20:D9:AF:5D:15:5B:11:9C:E3
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-aPUi_d5vCf8feIg2a9dFVsRnOM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:1b:27:bb:b7:67:c1:c7:a8:ad:cb:be:ce:b3:04:fe:36:0b:
         a4:3c:69:22:1a:9b:4d:81:0a:eb:ad:3e:b8:fc:20:a6:db:d5:
         9d:c5:90:c8:e1:df:0f:4a:0e:b3:75:99:95:c1:d7:b9:22:71:
         f9:b2:cf:6f:67:83:14:26:80:19:82:83:96:a3:b8:7f:0b:78:
         28:a4:e3:b9:5e:81:5d:09:b8:97:cc:a0:34:36:b5:c1:29:b5:
         5c:39:7a:5f:49:6d:ee:03:cd:ce:64:a6:ed:fc:4b:ab:63:3b:
         69:4c:ea:8a:0e:8a:8a:eb:93:8c:54:80:77:35:5a:aa:78:ed:
         be:d1:3e:f4:12:2e:af:53:81:4e:84:f6:4d:78:91:9d:15:7a:
         81:7b:44:d7:fb:a2:f3:cf:b8:be:e8:48:34:94:e1:d1:92:71:
         8f:05:38:0d:97:c2:7c:d9:8f:d6:04:a2:ad:76:00:d5:03:a9:
         ef:04:e0:3d:70:81:a8:cb:a6:88:1b:41:a9:38:b1:a1:2f:04:
         c7:a6:44:e2:8b:4d:02:05:41:2c:a7:1b:d5:2c:f6:57:84:dd:
         ab:d5:f5:28:bd:a2:28:15:c3:6a:02:99:4d:58:38:7c:5e:ce:
         79:69:16:af:1e:23:67:df:07:84:ab:3d:e2:45:05:e0:f6:9b:
         1c:c5:45:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----